Privacy Policy

Last updated: 11 October 2026

Who we are

This website, unifireflameranger.com, and the design tools at tools.unifireflameranger.com (together, the “Site”) are operated by Unifire AB, Exportgatan 33D, 42246 Hisings Backa, Sweden (“Unifire”, “we”, “us”). Unifire AB is the data controller for personal data processed through the Site.

Contact for privacy matters: legal@unifire.com

What the Site is for

The Site hosts engineering design tools for Unifire’s team, partners and customers. It is not a public service and is not used for advertising or marketing. The public pages (this policy and the home page) can be viewed by anyone; the tools themselves can only be opened by people whose email address Unifire has authorized.

Personal data we process, and why

Authorized email addresses. To give you access to the tools, we keep your email address on a list of authorized users, together with the name of your company or organisation where relevant. Legal basis: our legitimate interest in providing and controlling access to our tools (GDPR Art. 6(1)(f)) and, where the tools are provided under an agreement with you or your organisation, performance of that agreement (Art. 6(1)(b)).

Sign-in. When you open a tool, you are asked for your email address and a one-time code is emailed to you. The sign-in service records each sign-in: your email address, the date and time, your IP address and approximate location (country), and your browser type, and whether access was granted or refused. We use these records to control access, to know who uses the tools, and to detect misuse or security incidents. Legal basis: legitimate interest in security and access management (Art. 6(1)(f)).

Technical logs. Like virtually every website, our hosting and security provider processes standard technical data (IP address, time, page requested, browser type) to deliver the pages and protect the Site against attacks. Legal basis: legitimate interest in the secure operation of the Site (Art. 6(1)(f)).

Emails. The only emails the Site sends are the one-time sign-in codes you request. We do not send newsletters or marketing from the Site.

What we do not do

We do not use analytics or tracking tools, advertising cookies, social-media plugins, embedded third-party fonts or scripts, or third-party trackers of any kind. We do not sell or share your data for marketing purposes. The calculations you make in the tools run entirely in your own browser; the values you enter and the projects you save are not sent to us.

Cookies and storage in your browser

The public pages set no cookies. When you sign in to the tools, the sign-in service sets a strictly necessary cookie (CF_Authorization) that keeps you signed in for the length of your session; the service may also set strictly necessary security cookies to protect the Site against automated attacks. These are essential for the Site to work and are exempt from the consent requirement.

The tools also store a few items in your browser’s own storage — for example, that you have accepted the terms of use, your display preferences and your working project. This information stays on your device and is not sent to us. You can remove it at any time by clearing your browser’s site data.

Who has access to your data

Only authorized Unifire personnel who administer the Site. The Site is hosted, and sign-in is provided, by Cloudflare, Inc. (USA), which processes the data on our behalf as a processor under a data processing agreement. Some of this data may be processed outside the EU/EEA, including in the United States. Such transfers are protected by the European Commission’s Standard Contractual Clauses included in Cloudflare’s data processing agreement, together with Cloudflare’s certification under the EU-U.S. Data Privacy Framework. You may request a copy of the relevant safeguards by contacting us.

How long we keep it

• Authorized email addresses: while you or your organisation have access to the tools, and deleted within 3 months after access ends.
• Sign-in records: kept by the sign-in service for the limited period provided under Unifire’s plan, and then deleted automatically.
• Technical logs: kept by our hosting provider only for as long as needed for security and troubleshooting, and then deleted automatically.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to data portability where applicable. To exercise any of these rights, contact us at legal@unifire.com. You also have the right to lodge a complaint with a supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, www.imy.se).

Changes

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.